jynvaxai94[.]com

The domain jynvaxai94.com has been identified as a high-risk phishing resource specializing in brand impersonation. Analysis confirms the domain specifically targets users of the Across Protocol, a decentralized bridging platform, by presenting itself as an official portal for "Jynvax AI 9.4™" with a fabricated page title: "✅ Jynvax AI 9.4™ | Official Website | 2026 Verified Access 🛡️". The domain is currently offline, though prior activity suggests an intent to deceive users into disclosing sensitive credentials or interacting with malicious smart contracts under the guise of verified access.

Technical indicators reveal multiple red flags. The domain was registered on February 23, 2026, through Dynadot LLC, a registrar frequently observed in phishing operations. It resolves to the IP address 188.114.96.3, which is associated with Cloudflare infrastructure, a common obfuscation tactic to conceal backend hosting. Detection metrics are substantial: 15 of 95 security vendors on VirusTotal flagged the domain as malicious, while Google Safe Browsing classified it under "SOCIAL_ENGINEERING". The domain appears on four distinct security blocklists and is actively blocked by multiple threat intelligence feeds, including MetaMask and SEAL. A Gridinsoft trust score of 0/100 further corroborates its malicious classification. The use of HTTP/3 and Cloudflare technologies suggests an attempt to evade traditional detection mechanisms by leveraging modern, encrypted protocols.

As of the latest assessment, jynvaxai94.com has been taken offline, though the infrastructure remains a latent threat. Organizations and users are advised to implement immediate countermeasures, including the addition of the domain and its associated IP (188.114.96.3) to internal blocklists. Network administrators should monitor for any residual DNS queries or connections to the IP, particularly within environments utilizing Across Protocol or similar decentralized finance platforms. End-users should be educated on recognizing brand impersonation tactics, such as fabricated verification badges or urgency-driven messaging. Given the domain's registration recency and high detection rate, continuous monitoring for resurgence or related domains is strongly recommended.